This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: Gkx+7kGkGXXjjurap6xO940cmzXdX84wAY/zww6uF7E= Subject key identifier: 06:75:CC:43:58:3D:0D:61:61:C2:E8:CF:69:01:C1:14:61:0B:C8:C0 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 055A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 0537 Signing time: Thu 04 Dec 2025 22:09:35 +0000 Manifest this update: Thu 04 Dec 2025 22:09:34 +0000 Manifest next update: Thu 11 Dec 2025 22:09:34 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: mz7mATcIeskHtFINXsEXI2XRs/c65TPNpUTise5cyi0=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Dec 4 22:09:34 2025 GMT Not After : Dec 11 22:09:34 2025 GMT Subject: CN=6932069e-64e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:11:da:b0:a3:0e:c5:ea:cd:91:f4:3a:75: 63:c3:55:f7:4a:13:e8:19:3f:6c:49:f5:f5:88:b8: 2c:68:a9:85:97:61:d3:f7:2f:f7:52:a4:9e:7a:11: d5:4e:a1:58:78:ae:55:cb:6c:d9:c3:f1:d8:31:3c: e8:3e:24:10:f0:27:0c:b3:2d:a0:8b:ca:d9:ba:58: cd:61:42:62:d2:94:ab:40:30:f6:9a:c8:2a:48:44: 39:73:5b:25:88:67:b6:37:59:13:d8:d7:b6:05:21: c8:49:e8:e2:3e:25:8a:3f:7f:1b:be:4e:b3:5a:12: cd:a0:6d:dd:59:b0:86:25:3f:77:1b:e8:9e:e2:18: 2c:25:13:24:7c:5b:e4:95:c8:6e:2d:bd:6e:53:e5: 7f:c6:92:74:24:9b:15:3c:3c:8c:5a:4f:03:a2:58: 18:c7:9f:29:52:e6:6c:44:21:d7:b9:88:91:4d:6e: fb:c5:ed:c4:00:bf:73:a5:05:34:b3:79:9c:76:38: b2:2a:c2:27:1d:87:a5:ee:1d:47:69:d2:2a:78:1f: 42:93:75:7a:da:02:c3:89:86:4f:5f:de:c4:7c:a0: ba:4c:c1:92:ba:26:3a:74:fd:b1:07:00:2f:53:92: d5:8c:2f:08:3a:13:57:dc:55:87:65:3a:0b:8f:7c: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:75:CC:43:58:3D:0D:61:61:C2:E8:CF:69:01:C1:14:61:0B:C8:C0 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:d6:52:bd:ca:ff:65:1a:f2:45:fd:13:19:d3:67:3c:c2:0e: dc:4d:3d:dc:16:df:24:b4:22:e2:70:0d:f3:6a:dd:b3:73:7c: 48:09:2b:5c:a0:25:f3:a9:16:f3:44:c5:08:1c:e1:81:21:a6: ec:24:62:65:32:eb:25:b4:ac:e6:42:ad:25:dc:48:78:43:81: 11:81:e3:3e:8e:86:7c:fb:bd:28:ab:66:1b:35:48:88:76:1d: 8c:96:93:02:0f:79:89:a0:43:90:8c:7f:8d:dc:46:e9:09:4c: fd:68:83:3d:6e:e2:ea:de:c6:74:16:a8:46:59:9c:5e:db:b0: 25:5b:30:73:32:8a:60:94:f6:f5:47:b7:b7:f8:89:aa:fe:67: 91:f9:b9:83:8b:38:40:8e:0b:3f:cc:a4:fa:e7:5f:da:db:f8: e6:bb:57:fd:9b:2d:5b:e4:c6:19:6b:78:48:14:29:8f:bb:db: 7c:75:2c:0e:a5:0b:19:0a:de:7d:27:08:13:6c:88:34:d7:9f: 08:72:62:06:a6:bd:ba:33:80:ab:31:5d:d3:3b:66:69:a7:e6: 38:f9:18:bd:ab:a2:c8:75:0b:55:e2:da:38:02:82:c9:b7:db: 23:b2:f8:83:d1:be:5c:c0:df:fc:87:26:8f:04:44:64:8e:00: 79:df:9f:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUxMjA0MjIwOTM0WhcNMjUxMjExMjIwOTM0WjAYMRYwFAYD VQQDEw02OTMyMDY5ZS02NGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vAR2rCjDsXqzZH0OnVjw1X3ShPoGT9sSfX1iLgsaKmFl2HT9y/3UqSeehHV TqFYeK5Vy2zZw/HYMTzoPiQQ8CcMsy2gi8rZuljNYUJi0pSrQDD2msgqSEQ5c1sl iGe2N1kT2Ne2BSHISejiPiWKP38bvk6zWhLNoG3dWbCGJT93G+ie4hgsJRMkfFvk lchuLb1uU+V/xpJ0JJsVPDyMWk8DolgYx58pUuZsRCHXuYiRTW77xe3EAL9zpQU0 s3mcdjiyKsInHYel7h1HadIqeB9Ck3V62gLDiYZPX97EfKC6TMGSuiY6dP2xBwAv U5LVjC8IOhNX3FWHZToLj3wQ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZ1zENY PQ1hYcLoz2kBwRRhC8jAMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD1lK9yv9lGvJF/RMZ02c8wg7cTT3cFt8ktCLicA3zat2zc3xICStc oCXzqRbzRMUIHOGBIabsJGJlMusltKzmQq0l3Eh4Q4ERgeM+joZ8+70oq2YbNUiI dh2MlpMCD3mJoEOQjH+N3EbpCUz9aIM9buLq3sZ0FqhGWZxe27AlWzBzMopglPb1 R7e3+Imq/meR+bmDizhAjgs/zKT651/a2/jmu1f9my1b5MYZa3hIFCmPu9t8dSwO pQsZCt59JwgTbIg0158IcmIGpr26M4CrMV3TO2Zpp+Y4+Ri9q6LIdQtV4to4AoLJ t9sjsviD0b5cwN/8hyaPBERkjgB5358L -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:17 2025 by rpki-client